$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft File: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft (raw, json) Hash identifier: C+LwFkOz+DXsyOfIfE7ZBg4CG6EOo3p7xKdVaIvG5Wg= Subject key identifier: E8:57:CC:87:BD:A1:F9:2A:E6:77:71:EB:27:19:50:55:61:4F:7D:FA Authority key identifier: 1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 Certificate issuer: /CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Certificate serial: 019CAA219C6607E4B40C3ACDE2A6793EB94C Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft Manifest number: 0243 Signing time: Sun 01 Mar 2026 16:00:55 +0000 Manifest this update: Sun 01 Mar 2026 16:00:55 +0000 Manifest next update: Mon 02 Mar 2026 16:00:55 +0000 Files and hashes: 1: 2FyZFvB-FVapPyp8OxF8Buhh3yE.roa (hash: /qV6LbWkf2GFhmc8pLjxWR0FKBZh68Hu0SYXyVMMG5A=) 2: 9ouTpRXko3YlvkaiRjw1itJUuUs.roa (hash: RGUF99UKxmAJ27xRbQTvqiTs8v0Bgu29SVLvzHCLnw8=) 3: Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl (hash: yMkWHZP8E1EC/wXPfDkW0AikGwmaU08hU+qJ+CLF6jw=) 4: KO1c-cYNNAqMCPq-wcceOmqVK6w.roa (hash: hDkUSJOds1xJ/mF78m3f9ivjRM5rpSpBotw9vJgP2Oc=) 5: L2E8kLfTz8qUteKmwoh31dFHaxE.roa (hash: hKyjS+FUJ/jdytIrLwzkzpmkG4KKryD3XZ0g36E7hhU=) 6: XJcb1-hBobILMv_Vof-Zxf0RkUg.roa (hash: VueF5+Q5F3brFftwGGvgxAFwrBBqXIBGanige3SzY7M=) 7: ZMFhHdct1ay2ckIDWW29DVIUO9Y.roa (hash: cULTButKO1Qr8LsfvEJV/B/XwfmJvmcWpfhHVwua4LI=) 8: aVBsoh77D_iNTVE6G-pVs4IwFNU.roa (hash: SjFP3EKO9kRJAQSSiHp1MkjRkFkKiddJQ7bpylLAvy4=) 9: dFj5GUqDYd98kL6xaY89BZmV-eM.roa (hash: EnCrHK5NIqJpxBDpMWNrNTC6CqIC7188rVdf1D5/tYM=) 10: dqFe7wNfjR1Nsc6av71rr7iwjrY.roa (hash: 778fc5HBa0o5AC8IwBl5WFzGBmNT+U8lXN1dyf737Ao=) 11: uoQLE-swTh85hiFVPsKl5eVWOQ4.roa (hash: K1SsR7agoiH69i/sTMUIc8R2fXxdtnIpRcWvPv/Q/3M=) 12: yP0ogUTvEW_hziCgm9-4IHiaPi8.roa (hash: 7r/sWNzGuAucLe4oatUSqYsAP6wWeQ7BrAK3AM7I0vk=) Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Mon 02 Mar 2026 15:00:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9c:aa:21:9c:66:07:e4:b4:0c:3a:cd:e2:a6:79:3e:b9:4c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=1a4dc22595fc1f588fbc4dde07c1c394998f33a7 Validity Not Before: Mar 1 16:00:55 2026 GMT Not After : Mar 2 16:00:55 2026 GMT Subject: CN=e857cc87bda1f92ae67771eb27195055614f7dfa Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:be:2e:ae:1d:c9:75:a1:94:c0:a7:8e:8b:59:eb: 02:05:ed:3c:0e:1b:bd:74:3e:05:c1:ae:3e:6a:2c: 3e:75:a6:35:4e:44:2e:5d:bb:5b:f0:eb:38:6e:39: fe:ce:71:2d:4c:be:b1:cc:ef:59:c0:56:af:a7:df: 09:00:4f:fa:bd:dc:81:a6:54:b1:13:a5:63:4a:d6: bc:a1:7c:ab:8a:6b:e2:00:88:33:ba:4c:51:4f:58: b7:c4:1b:fd:3b:3d:84:2c:7d:51:24:01:f5:ef:95: 51:fa:3b:e8:35:3e:53:94:51:6a:ed:99:88:de:c9: 5e:00:52:7b:11:09:75:1f:4f:66:f3:b7:5d:ba:cf: f1:3e:c6:9c:18:d8:cf:19:fc:55:ee:fc:d2:4c:b5: 68:c7:cf:95:9a:55:1f:1f:6e:7a:b3:07:7c:da:b8: d4:af:06:c2:82:5e:b4:f2:4b:29:ba:0e:7d:74:66: f5:67:2c:9f:3e:b3:32:cc:26:03:c7:af:85:33:2c: 0b:cb:80:6b:b5:8e:f3:da:fe:c2:98:19:70:4d:71: 31:f3:aa:d6:4e:0f:85:86:58:8c:4a:77:57:9d:12: 55:24:9d:b9:31:04:d1:12:36:c6:71:e7:ba:25:8a: a8:cb:b3:52:3a:7f:e2:e6:d6:8e:a4:14:b8:f3:34: 86:c1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: E8:57:CC:87:BD:A1:F9:2A:E6:77:71:EB:27:19:50:55:61:4F:7D:FA X509v3 Authority Key Identifier: keyid:1A:4D:C2:25:95:FC:1F:58:8F:BC:4D:DE:07:C1:C3:94:99:8F:33:A7 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.mft X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/38/0f12f2-8a2b-4346-b6b6-2b78b19b5a87/1/Gk3CJZX8H1iPvE3eB8HDlJmPM6c.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 22:c4:24:9e:cb:1d:b2:e4:9f:d8:68:89:5d:c7:ae:50:31:8a: 37:d4:d0:ce:5f:42:b6:cb:fa:24:cc:8c:e0:97:67:4b:b1:42: 22:21:29:e7:25:8d:e1:8b:80:03:30:d5:f0:dd:8f:bb:5e:00: d0:d2:20:56:fc:5d:b5:f7:a5:d3:86:a5:ff:9f:2f:34:f5:b4: e6:71:dc:eb:35:e4:bb:6c:32:fc:57:3a:98:5f:8f:4b:0d:4c: 26:6c:32:c6:8e:05:75:79:93:6a:e4:b4:37:f5:37:7a:69:2e: 51:8d:ab:8c:51:eb:76:b8:a1:a2:22:a7:b8:1b:d1:03:d0:89: f9:ed:e6:f2:6d:5f:b1:74:8a:05:29:76:88:c1:2e:0b:1b:e7: b3:6d:da:c2:f0:31:18:52:6a:53:d5:1a:f1:bb:5f:92:af:c7: 85:e2:3a:0c:3f:10:89:6b:b2:9a:50:fd:cd:88:28:94:30:f4: d0:2d:cc:5e:6c:e0:ef:da:01:c9:b7:f4:94:0b:5d:7e:1f:99: 3c:e6:37:69:54:1f:2f:80:fe:df:00:d8:0d:81:6b:51:fe:aa: 6d:99:17:4c:f4:2c:17:bb:12:e3:7b:af:8c:93:c6:68:af:84: e9:09:73:2f:19:17:b2:4d:6d:7e:7a:f1:02:b6:0c:7c:a0:d4: 47:92:81:ae -----BEGIN CERTIFICATE----- MIIFFjCCA/6gAwIBAgISAZyqIZxmB+S0DDrN4qZ5PrlMMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDFhNGRjMjI1OTVmYzFmNTg4ZmJjNGRkZTA3YzFjMzk0OTk4 ZjMzYTcwHhcNMjYwMzAxMTYwMDU1WhcNMjYwMzAyMTYwMDU1WjAzMTEwLwYDVQQD EyhlODU3Y2M4N2JkYTFmOTJhZTY3NzcxZWIyNzE5NTA1NTYxNGY3ZGZhMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAvi6uHcl1oZTAp46LWesCBe08Dhu9 dD4Fwa4+aiw+daY1TkQuXbtb8Os4bjn+znEtTL6xzO9ZwFavp98JAE/6vdyBplSx E6VjSta8oXyrimviAIgzukxRT1i3xBv9Oz2ELH1RJAH175VR+jvoNT5TlFFq7ZmI 3sleAFJ7EQl1H09m87ddus/xPsacGNjPGfxV7vzSTLVox8+VmlUfH256swd82rjU rwbCgl608kspug59dGb1ZyyfPrMyzCYDx6+FMywLy4BrtY7z2v7CmBlwTXEx86rW Tg+FhliMSndXnRJVJJ25MQTREjbGcee6JYqoy7NSOn/i5taOpBS48zSGwQIDAQAB o4ICIjCCAh4wHQYDVR0OBBYEFOhXzIe9ofkq5ndx6ycZUFVhT336MB8GA1UdIwQY MBaAFBpNwiWV/B9Yj7xN3gfBw5SZjzOnMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYt MmI3OGIxOWI1YTg3LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLm1mdDCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8zOC8wZjEyZjItOGEyYi00MzQ2LWI2YjYtMmI3OGIxOWI1YTg3 LzEvR2szQ0paWDhIMWlQdkUzZUI4SERsSm1QTTZjLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAIsQknssd suSf2GiJXceuUDGKN9TQzl9Ctsv6JMyM4JdnS7FCIiEp5yWN4YuAAzDV8N2Pu14A 0NIgVvxdtfel04al/58vNPW05nHc6zXku2wy/Fc6mF+PSw1MJmwyxo4FdXmTauS0 N/U3emkuUY2rjFHrdrihoiKnuBvRA9CJ+e3m8m1fsXSKBSl2iMEuCxvns23awvAx GFJqU9Ua8btfkq/HheI6DD8QiWuymlD9zYgolDD00C3MXmzg79oBybf0lAtdfh+Z POY3aVQfL4D+3wDYDYFrUf6qbZkXTPQsF7sS43uvjJPGaK+E6QlzLxkXsk1tfnrx ArYMfKDUR5KBrg== -----END CERTIFICATE-----Generated at Sun Mar 1 23:56:50 2026 by rpki-client